最新的CheckPoint 156-215.71免費考試真題

問題1

A client has created a new Gateway object that will be managed at a remote location. When the client attempts to install the Security Policy to the new Gateway object, the object does not appear in the Install On check box. What should you look for?

A. Secure Internal Communications (SIC) not configured for the object.

B. A Gateway object created using the Check Point > Security Gateway option in the network objects, dialog box, but still needs to configure the interfaces for the Security Gateway object.

C. A Gateway object created using the Check Point > Externally Managed VPN Gateway option from the Network Objects dialog box.

D. Anti-spoofing not configured on the interfaces on the Gateway object.

正確答案: C

問題2

Which of the following commands will completely remove the Security Policy from being enforced on a Security Gateway?

A. fw unload

B. fw unloadlocal

C. cpstop

D. fw unload local

正確答案: B

問題3

Which feature or command provides the easiest path for Security Administrators to revert to earlier versions of the same Security Policy and objects configuration?

A. Policy Package management

B. Database Revision Control

C. dbexport/dbimport

D. upgrade_export/upgrade_import

正確答案: B

問題4

You are trying to save a custom log query in R71 SmartView Tracker, but getting the following error "Could not save 'query-name' (Error Database is Read only).
Which of the following is a likely explanation for this?

A. You do not have OS write permissions on the local SmartView Tracker PC in order to save the custom query locally

B. You have read-only rights to the Security Management Server database.

C. Another administrator is currently connected to the Security Management Server with read/write permissions which impacts your ability to save custom log queries to the Security Management Server.

D. You do not have the explicit right to save a custom query in your administrator permission profile under SmartConsole customization

正確答案: B

問題5

Which of the following tools is used to generate a Security Gateway R71 configuration report?

A. licview

B. ethereal

C. cpinfo

D. infoview

正確答案: C

問題6

Your manager requires you to setup a new corporate VPN between all your branch offices. He requires you to choose the strongest and most secure available algorithms for the headquarters to the Research and Development branch office. In addition, you must use high performance algorithms for all sales offices with shorter key length for the VPN keys. How would you configure this scenario?

A. This can not be achieved at all as all algorithms need to be the very same for all VPNs.

B. This can be done either in traditional mode or simplified VPN using 2 different communities and the headquarters as the center for both communities.

C. This can only be done in traditional mode VPNs while not using simplified VPN settings.

D. This can be done in a single community, but the encrypt action in the security Rule Base needs to be configured for exceptions.

正確答案: B

問題7

What statement is true regarding Visitor Mode?

A. All VPN traffic is tunneled through UDP port 4500.

B. Only ESP traffic is tunneled through port TCP 443.

C. Only Main mode and Quick mode traffic are tunneled on TCP port 443.

D. VPN authentication and encrypted traffic are tunneled through port TCP 443.

正確答案: D

問題8

How can you most quickly reset Secure Internal Communications (SIC) between a Security Management Server and Security Gateway?

A. Use SmartDashboard to retype the activation key on the Security Gateway. This will automatically Sync SIC to both the Security Management Server and Gateway.

B. From the Security Management Server's command line, Type fw putkey -p <shared key> < IP Address of security Gateway>.

C. Run the command fwm sic-reset to initialize the Internal Certificate Authority (ICA) of the Security Management Server. Then retype the activation key on the Security Gateway from SmartDashboard.

D. From cpconfig on the Gateway, choose the Secure Internal Communication option and retype the activation key. Next, retype the same key in the Gateway object in SmartDashboard and reinitialize Secure Internal Communications (SIC).

正確答案: D

問題9

For which protocol is anti-virus not available?

A. HTTPS

B. SMTP

C. FTP

D. HTTP

正確答案: A

問題10

You are using SmartUpdate to fetch data and perform a remote upgrade to a R71 Security Gateway. Which of the following statements is FALSE?

A. SmartUpdate can query the Security Management Server and Gateway for product information.

B. If SmartDashboard is open during package upload and upgrade, the upgrade will fail.

C. SmartUpdate can query license information running locally on the Gateway.

D. A remote installation can be performed without the SVN Foundation package installed on a remote NG with Application Intelligence Security Gateway.

正確答案: D

問題11

In order to have full control, you decide to use Manual NAT entries instead of Automatic NAT rules. Which is of the following is NOT true?

A. If you chose Automatic NAT instead, all necessary entries are done for you.

B. When using Dynamic Hide NAT with an address that is not configured on a Gateway interface, you need to add a proxy ARP entry for that address.

C. When using Static NAT, you must enter ARP entries for the Gateway on all hosts that are using the NAT Gateway with that Gateway's internal interface IP address.

D. When using Static NAT, you must add proxy ARP entries to the Gateway for all hiding addresses.

正確答案: C

最新的CheckPoint Check Point Certified Security Administrator R71 - 156-215.71免費考試真題

聯系我們

站內鏈接

最新更新